CVE-2022-3577
An out-of-bounds memory write flaw was found in the Linux kernel’s Kid-friendly Wired Controller driver. This flaw allows a local user to crash or pot...
Description d'origine
La description telle que publiée par la source (souvent en anglais).
An out-of-bounds memory write flaw was found in the Linux kernel’s Kid-friendly Wired Controller driver. This flaw allows a local user to crash or potentially escalate their privileges on the system. It is in bigben_probe of drivers/hid/hid-bigbenff.c. The reason is incorrect assumption - bigben devices all have inputs. However, malicious devices can break this assumption, leaking to out-of-bound write.
État des correctifs par distribution
Paquets corrigés publiés par chaque distribution pour cette CVE
- Debian DEBIAN-CVE-2022-3577 linux Corrigé dans: 5.10.127-1
- Ubuntu UBUNTU-CVE-2022-3577 linux-hwe-edge
Références
- advisory github.com
- advisory nvd.nist.gov
- web git.kernel.org
- web git.kernel.org
- web git.kernel.org